Over 1 million tech questions and answers.

Windows 7 64bit unable to file missing file in Hijackthis log file

Q: Windows 7 64bit unable to file missing file in Hijackthis log file

I ran hijack-this on my laptop today and I get a lot of errors when I post on this site http://hjt.networktechs.com/parse.php and check to fix them and they keep coming back. I have heard this was a common somewhere on the web? I don't think it is .., am I wrong? Please help!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:58:39 PM, on 9/6/2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Norton 360\Engine\4.2.0.12\ccSvcHst.exe
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files (x86)\Norton Utilities 14\RMTray.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\Steam\steam.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\4.2.0.12\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\4.2.0.12\IPSBHO.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\4.2.0.12\coIEPlg.dll
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [NortonUtilities] C:\Program Files (x86)\Norton Utilities 14\rmtray.exe /H
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~3\Office14\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/reso...an8/oscan8.cab
O16 - DPF: {9191F686-7F0A-441D-8A98-2FE3AC1BD913} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/actives.../as2stubie.cab
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: ConfigFree Gadget Service - TOSHIBA CORPORATION - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe
O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FcsNapSha - Unknown owner - C:\Windows\system32\FcsNapSha.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files (x86)\Norton 360\Engine\4.2.0.12\ccSvcHst.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - PC Tools - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Remote Procedure Call (RPC) Locator (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8565 bytes



And this what is says on the site -->

Could not execute query correctly. : 1062: Duplicate entry '@serviceystemroot%system32fxsresm.dll,-' for key 1
Could not execute query correctly. : 1062: Duplicate entry '@serviceystemroot%system32psbase.dll,-' for key 1
Could not execute query correctly. : 1062: Duplicate entry '@serviceystemroot%system32spoolsv.exe,-' for key 1
Could not execute query correctly. : 1062: Duplicate entry '@serviceystemroot%system32vssvc.exe,-' for key 1
Could not execute query correctly. : 1062: Duplicate entry '@serviceystemroot%system32wbengine.exe,-' for key 1Logfile of Trend Micro HijackThis v2.0.2
Old Version of HijackThis
We suggest you upgrade to the latest version of HijackThis (version 1.99.1") at www.merijn.org

Scan saved at 4:58:39 PM, on 9/6/2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Norton 360\Engine\4.2.0.12\ccSvcHst.exe
ccSvcHst.exe
We Don't know! Please post a comment with information about this file

C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
TeaTimer.exe
TeaTimer.exe is Spybot Search and Destroys resident protection which prevents unauthorized system changes. More information can be found here.

Quote:

The Resident TeaTimer is a new tool of Spybot-S&D which perpetually monitors the processes called/initiated. It immediately detects known malicious processes wanting to start and terminates them giving you some options, how to deal with this process in the future: You can set TeaTimer to:

* be informed, when the process tries to start again
* automatically kill the process
* or generally allow the process to run

There is also an option to delete the file associated with this process.

In addition, TeaTimer detects, when something wants to change some critical registry keys. TeaTimer can protect you against such changes again giving you an option: You can either "Allow" or "Deny" the change.

As TeaTimer is always running in the background, it takes some resources of about 5 MB.


C:\Program Files (x86)\Norton Utilities 14\RMTray.exe
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

C:\Program Files (x86)\Steam\steam.exe
steam.exe

What is it?

Valve Steam - steam.exe

What does it do?

Steam.exe is the main executable for Valve Software's Steam Powered content streaming application. Steam?distributes games and?content such as Half Life 2 and its addons like Counter Strike?using an online?streaming method. Whilst many would argue it is not the best software ever made, it is by no means harmful ;)

Virus Precations

Files associated with popular games tend to be targets, although at this point in time no such virus seems to exist that targets steam.exe or distributes itself as?steam.exe. This Google search should keep you up to date in case one does surface though.

C:\Program Files (x86)\Mozilla Firefox\firefox.exe
firefox.exe

What is it?
Mozilla Firefox - firefox.exe

What does it do?
firefox.exe - This is Mozilla Firefox my personal favorite browser. It is the slimmed down browser only project based upon Mozilla code.

Virus Precautions:
You'll want to keep an eye on this google search for any known viruses. The normal location of this file is C:Program FilesMozilla Firefoxfirefox.exe


C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe
HijackThis.exe
This is our favorite application for fighting against malware and other trashy application that bog systems down. Our guide to using this software can be found here. We have also taken the time to write a system to process the log files created from this application here.


R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
Internet Start Page
This is where you go when you first open IE. Should be something like google.com or iamnotageek.com if theres a site you don't know here clean this line!

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
Internet Start Page
This is where you go when you first open IE. Should be something like google.com or iamnotageek.com if theres a site you don't know here clean this line!

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
Internet Start Page
This is where you go when you first open IE. Should be something like google.com or iamnotageek.com if theres a site you don't know here clean this line!

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
Internet Start Page
This is where you go when you first open IE. Should be something like google.com or iamnotageek.com if theres a site you don't know here clean this line!

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
Internet Start Page
This is where you go when you first open IE. Should be something like google.com or iamnotageek.com if theres a site you don't know here clean this line!

F2 - REG:system.ini: UserInit=userinit.exe
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
SDhelper.dll - SpyBot Search&Destroy http://www.safer-networking.org/index.php
SDhelper.dll - SpyBot Search&Destroy http://www.safer-networking.org/index.php

O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\4.2.0.12\coIEPlg.dll
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\4.2.0.12\IPSBHO.DLL
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\4.2.0.12\coIEPlg.dll
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
Malwarebytes' Anti-Malware
"System tray access to and realtime protection agent for the registered version of MalwareBytes' Anti-Malware - which is ""considered to be the next step in the detection and removal of malware. In our product we have compiled a number of new technologies that are designed to quickly detect

O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
SpybotSD TeaTimer
"Part of the popular Spybot - Search & Destroy spyware removal tool from Safer Networking Limited. ""Resident TeaTimer is a tool of Spybot-S&D which perpetually monitors the processes called/initiated. It immediately detects known malicious processes wanting to start and terminates them giving you some options

O4 - HKCU\..\Run: [NortonUtilities] C:\Program Files (x86)\Norton Utilities 14\rmtray.exe /H
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000
Internet Right Click Menu
Most of the time this is garbage leave it only if you actually use this function. Otherwise for the sake of cleanliness get rid of this sucker. A wise man once said Cleanliness is next to godliness

O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~3\Office14\ONBttnIE.dll/105
Internet Right Click Menu
Most of the time this is garbage leave it only if you actually use this function. Otherwise for the sake of cleanliness get rid of this sucker. A wise man once said Cleanliness is next to godliness

O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
Uninstall BitDefender Online Scanner v8
BitDefender Free Online Virus Scan See_Here

O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
Uninstall BitDefender Online Scanner v8
BitDefender Free Online Virus Scan See_Here

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/reso...an8/oscan8.cab
oscan8.cab
Bitdefender

O16 - DPF: {9191F686-7F0A-441D-8A98-2FE3AC1BD913} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/actives.../as2stubie.cab
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
Extra Protocols
There's a few known hijackers that use this but I haven't found anything good come out of these

O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
File Missing
When a file is missing, you should always have HijackThis fix the item.

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
Bonjour Service
Create's a network of computers and smart devices. Made by Apple Computer Inc. For more information

O23 - Service: ConfigFree Gadget Service - TOSHIBA CORPORATION - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
ConfigFree Service
Toshiba related

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
File Missing
When a file is missing, you should always have HijackThis fix the item.

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
File Missing
When a file is missing, you should always have HijackThis fix the item.

O23 - Service: FcsNapSha - Unknown owner - C:\Windows\system32\FcsNapSha.exe (file missing)
File Missing
When a file is missing, you should always have HijackThis fix the item.

O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
iPod Service
Related to Apple iPod.

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
File Missing
When a file is missing, you should always have HijackThis fix the item.

O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
File Missing
When a file is missing, you should always have HijackThis fix the item.

O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files (x86)\Norton 360\Engine\4.2.0.12\ccSvcHst.exe
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
File Missing
When a file is missing, you should always have HijackThis fix the item.

O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
File Missing
When a file is missing, you should always have HijackThis fix the item.

O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - PC Tools - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
File Missing
When a file is missing, you should always have HijackThis fix the item.

O23 - Service: Remote Procedure Call (RPC) Locator (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
File Missing
When a file is missing, you should always have HijackThis fix the item.

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
File Missing
When a file is missing, you should always have HijackThis fix the item.

O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
File Missing
When a file is missing, you should always have HijackThis fix the item.

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
File Missing
When a file is missing, you should always have HijackThis fix the item.

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
File Missing
When a file is missing, you should always have HijackThis fix the item.

O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
Unknown Item
Sorry. We are not sure what this item is. If you would like, you can click on it to request additional information about it.

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
File Missing
When a file is missing, you should always have HijackThis fix the item.

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
File Missing
When a file is missing, you should always have HijackThis fix the item.

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
File Missing
When a file is missing, you should always have HijackThis fix the item.

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
File Missing
When a file is missing, you should always have HijackThis fix the item.

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
File Missing
When a file is missing, you should always have HijackThis fix the item.

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
File Missing
When a file is missing, you should always have HijackThis fix the item.

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
File Missing
When a file is missing, you should always have HijackThis fix the item.

RELEVANCY SCORE 200
Preferred Solution: Windows 7 64bit unable to file missing file in Hijackthis log file

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Windows 7 64bit unable to file missing file in Hijackthis log file

It's doubtful those files are missing. More likely a bug still present in HijackThis where it cannot correctly enumerate some entries, so it gives a (file missing).

I would not put any faith in online analyzers such as that one. Much better to use these online databases

www.systemlookup.com
http://www.bleepingcomputer.com/startups/
http://www.bleepingcomputer.com/filedb/

There's nothing wrong with any of those entries. Please leave them alone.

Analysis logs are only to be posted in this section of the forum, not General Security. I've moved it here.

I see no sign of infection in those logs. If you think the machine is infected...


We no longer use HijackThis as our initial analysis tool.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, not here. I currently have as many open malware removal assistance topics as I can effectively handle.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply. Please note: the gmer rootkit scanner is not for 64bit systems such as yours. Don't run it.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

Read other 4 answers
RELEVANCY SCORE 94.8

In windows 7 pc whenever trying to attach a file on outlook nothing is happening or no file/folder is opening and whenever select any file on application for mounting no file or no drives are opening....

Read other answers
RELEVANCY SCORE 94

Hi there,Whenever I try to delete a file in my download file, windows explorer stop working. I am currently running an antivirus scan on my laptop and I did so on my download and there was no apparent infections. I run a sfc scan from the cmd.exe and everything was fine. I have got an Hijackthis log Analysis, but I can't interpret it myself. Please can somebody? Thanks in advance.Logfile of Trend Micro HijackThis v2.0.4Scan saved at 21:44:12, on 08/01/2011Platform: Windows 7 (WinNT 6.00.3504)MSIE: Internet Explorer v8.00 (8.00.7600.16700)Boot mode: NormalRunning processes:C:\Program Files\Soluto\soluto.exeC:\Windows\system32\taskhost.exeC:\Windows\system32\Dwm.exeC:\Program Files\AVG\AVG9\avgtray.exeC:\Program Files\Microsoft Office\Office12\GrooveMonitor.exeC:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exeC:\Program Files\BT Broadband Desktop Help\btbb\BTHelpNotifier.exeC:\Program Files\HP\HP Software Update\hpwuschd2.exeC:\Program Files\Common Files\Java\Java Update\jusched.exeC:\Program Files\FileCenter\Main\FileConvertAgent.exeC:\Program Files\DivX\DivX Update\DivXUpdate.exeC:\Program Files\Dell\QuickSet\quickset.exeC:\Program Files\IDT\WDM\sttray.exeC:\Program Files\DellTPad\Apoint.exeC: ... Read more

A:(Hijackthis log Analysis) Whenever I try to delete a file in my download file windows explorer stop working

Hi,Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.Please subscribe to this topic, if you haven't already. You can subscribe by clicking the Options box to the right of your topic title and selecting Track This Topic.

Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.

Please reply to this post so I know you are there.The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.Once I receive a reply then I will return with your first instructions.Thanks

Read other 7 answers
RELEVANCY SCORE 87.2

Windows Vista Ultimate 64bitBitdefender Total Security 2009Ad-Aware Anniversary EditionI had to update my Nvidia drivers form there website, and had to install a ActiveX which caused my Bitdefender to go crazy and started blocking alot of "Trojan.Zlobs" and I had the same problem with "CanYouRunIt.com". First this gaming PC is 2 days old, also I use the Game-Mode on the BD 2009 alot while gaming, which I think I might have cause something bad to happen. This PC became slower, when I goto shut it down, it just freezes in the Shutdown screen, also constanly IE7 will crash or not open at all. I have Run a Deep scan from my AntiVirus on Bitdefender, and Full Scan from Ad-Aware, but yet both found nothing! So any sight I goto that requires a ActiveX download, it still does the same thing! So I'm looking for the answer to what is the problem, and whats up with this HiJackThis log!!!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 11:50:04 PM, on 1/29/2009Platform: Windows Vista SP1 (WinNT 6.00.1905)MSIE: Internet Explorer v7.00 (7.00.6001.18000)Boot mode: NormalRunning processes:C:\Program Files (x86)\ASRock WiFi-802.11g Install Program\RtWLan.exeC:\Program Files (x86)\ASRock Utility\InstantBoot\InstantBoot.exeC:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exeC:\Program Files (x86)\Java\jre6\bin\jusched.exeC:\Program Files ... Read more

A:Vista Ultimate 64bit Missing File/Possibly Infected

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a description of your problem, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results, click no to the Optional_ScanFollow the ... Read more

Read other 2 answers
RELEVANCY SCORE 86.8

During a TrendMicro virus scan, it found an archive that was infected. A quick check of the archive (Which I'd grabbed months before, but never ran) showed it was actually an application, so I went to shift+del the file (No sense dumping a virus into the recycle bin), and poof it's gone.

Then I went to delete the folder it was in, but... it wouldn't let me. Told me I didn't have the permissions to do so. A quick check of the folder's contents revealed the virus/app was back, as if it had never been deleted.

If I try doing a regular delete, it tells me Destination Folder Access Denied.

So I started poking around the file's security properties.
"Unable to display current owner."

I tried changing the owner, but it wouldn't let me do that.
I downloaded Unlocker, right-clicked on the file and unlocked it, but nothing seemed to happen, and same results when I try to delete it.

I'm running Vista 32-bit, not connected to a local network (Just one computer), and I'd really like to delete this virus/app off my machine. TrendMicro was unable to get rid of it, and I can't seem to get rid of it either.
 

A:Solved: Cannot delete file / No Permissions - Unable to display current owner of file

Ha, nevermind. Unlocker just took an enormous amount of time in actually starting up, and turns out the virus scanner had a process linked to the file. So, problem solved. Nothing to see here.
 

Read other 1 answers
RELEVANCY SCORE 86.4

Logfile of Trend Micro HijackThis v2.0.2Scan saved at 11:10:21 AM, on 9/6/2009Platform: Windows Vista SP2 (WinNT 6.00.1906)MSIE: Internet Explorer v8.00 (8.00.6001.18813)Boot mode: NormalRunning processes:C:\Program Files (x86)\Google\Google Calendar Sync\GoogleCalendarSync.exeC:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exeC:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exeC:\Program Files (x86)\Internet Explorer\iexplore.exeC:\Program Files (x86)\Internet Explorer\iexplore.exeC:\Windows\SysWow64\Macromed\Flash\FlashUtil10c.exeC:\Windows\sysWow64\SearchProtocolHost.exeC:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157R0 - HKLM\Software\... Read more

A:Intermittent Crashes, Vista Ultimate 64, whats with the "file missing" entries in my log file

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 86.4

Kaspersky found a file infected with a trojan, but did not offer to clean, delete, or quarantine it. That was not very helpful, so I figured I had better delete it manually, so I navigated to it, clicked on it, pressed shift delete, and windows said it could not find it!!!
I tried to delete it through the command prompt, even shutting down the explorer.exe process, but still no go (same error).
Any ideas what to do?

BTW: the file was located in the Temporary Internet Files folder, in the subfolder Content.IE5
 

A:Solved: unable to delete file: system cannot find the file specified

Read other 10 answers
RELEVANCY SCORE 86

Recently my system crashed.......Win98 se.....Intel Pntm 2 /800 celeron/ 256ram. 20gig/hd/CDRW driver not working

I took my computer into a local shop for a complete purging/cleasing after the crash however the burner program is now not working (Record Now) and the fault (dialogue box) that comes up is that a file is missing.....namely ........MSVBVM60.DLL......... how do I get this file back into the program or whatever else is necessary to get this program functioning again.........

Thanks.

Duke2
 

A:Record Now program missing DLL file to re-install how do I get this file back?

Read other 8 answers
RELEVANCY SCORE 86

When i attempt to open a Microsoft Power Point file (.PPT), i receive the following error message:"Sorry, the file cannot be opened because part of the file is missing."
How to stop this error?
 

A:PPT: "Part of File is Missing" Error Attempting to Open File

It means the file is damaged or corrupt. Is it saved on a USB drive, or on the computer hard drive? if it's on a USB, then the file wasn't properly closed before the USB was removed. If it's saved to the hard drive, then the file is damaged.
You can try opening PowerPoint, then clicking on the file you want to open and dragging and dropping it into PowerPoint.

Read other 2 answers
RELEVANCY SCORE 86

when i right click on mozilla on my desktop to choose open
i see its missing from there
also when i right click on .mp3 files the option " Enqueue in Winamp" is also missing
i have selected enqueue option in winamp preferences
i just dont remeber when did this problem started
i tried system restore but didnt help
please help
i attached pics of the problem
help will be appreciated please


 

A:right clicking on exe file or link file some context menu missing

please help guys..........
 

Read other 1 answers
RELEVANCY SCORE 86

I tried the recommendations for fixing this below:









 


Follow these steps to grant full permissions to the folder where the files are stored: 1. Right click on the folder on the external drive and click on
properties. 2. On the property window, click Security tab.
3. Now click on Edit and then click Add.
4. Now type everyone in the box and
click OK.

5. Then check Full control check box.

6. Click on Apply and then click OK.
You may also try the below mentioned steps:
1. Click on Start. 2. Go to Control Panel. 3. Select "SOUND". 4. Double click on speakers. 5. Click on advanced tab and then uncheck enable audio enhancements.






But then I received the error message that I don't have rights to edit and add.  Why would this be?  I am the administrator?

Thanks!

A:Windows Media Player cannot access the file. The file might be in use, you might not have access to the computer where the file is stored, or your proxy settings might not be correct.

Hi,
Please first take ownership of the folder or files, then give yourself full control permission.
Learn How to Take or Assign Ownership of Files and Folders
http://technet.microsoft.com/en-us/magazine/ff404240.aspx
Yolanda Zhu
TechNet Community Support

Read other 3 answers
RELEVANCY SCORE 85.6

Hi there,
New to the forum but have been lurking for a while. I've just recently downloaded the Embird trial version and have been trying to figure out how to convert my logo which is currently a .png file, into a .dst file. The thing is, I have white writing on a black background so I've been banging my head trying to figure out how to select only the white writing in order to have that stitched rather than everything.

Any help would be greatly appreciated. I have attached the .png file for refernce
 

Read other answers
RELEVANCY SCORE 85.2

A friends PC became infected with a trojan and the LOP virus. Need some assistance in removal.
Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 11:29:48 AM, on 3/12/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\WINDOWS\system32\dlcccoms.exe
C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Documents and Settings... Read more

A:Solved: HijackThis Log File - Recommend file removal.

Read other 7 answers
RELEVANCY SCORE 85.2

Hello. I ran HijackThis and got the Hosts File blocked access warning. I don't remember getting this in the past and there seem to be a lot more entries in my log file than there used to be. Could someone take a look at it and tell me if they see anything that needs attention?

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:35:52 PM, on 6/17/2018
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.17568)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\HP SimplePass\TouchControl.exe
C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
E:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files (x86)\Verizon Wireless\VZAccess Manager\VZAccess Manager.exe
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\Program Files (x86)\AVAST Software\Avast Cleanup\TuneupUI.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\CyberLink\Shared files\brs.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpWareSE4.exe
C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Reader_sl.exe
C:\Program Files (x86)\Canon\Solution Menu EX\CN... Read more

Read other answers
RELEVANCY SCORE 84.8

Hi,
I have a BHO missing in HJT, and when I check it to remove it keeps reappearing. I'm afraid it may be hidden somewhere and slowing down computer. Can you please help. Here is HJT log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:05:49 AM, on 5/2/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Sunbelt Software\VIPRE\SBAMSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Sunbelt Software\VIPRE\SBAMTray.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://excite.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: (no name) - {339A8F60-24AF-46E6-8940-D048F485C97E} - c:\windows\system32\tjgdenn.dll (file missing)
O4 - HKLM\..\Run: [SBAMTray] C:\Program Files\Sunbelt Software\VIPRE\SBAMTray.exe
O23 - Service: VIPRE Antivirus + Antispyware (SBAMSvc) - Sunbelt Software - C:\Program Files\Sunbelt Software\VIPRE\SBAMSvc.exe

--Thanks
George
 

Read other answers
RELEVANCY SCORE 84.4

hey i was cleaning out my computer of spyware and the like, and when i rebooted my computer, i got an error msg saying "unable to find xgibsdqn.dll" and everytime i log in to Windows XP, i get that msg.

ive been on google and to all the free dll download sites, but apparently that file does not exist.

can anyone help me?
 

A:unable to find a missing .dll file

Read other 16 answers
RELEVANCY SCORE 84.4

Hi..trying to salvage this mess. Dell Laptop PP05XB-Windows XP

Trying to fix computer for friend....

She has several Trojans, Vundo, countless others.....infested!

Norton detected 3, fixed them, rebooted and received the prompt for corrupt hal.dll, windows wont boot.

Had an XP upgrade cd..didnt work obviously...came across full version of XP professional..recognizes
partitions but wont repair due to no password known....tried everything..she doesnt recall setting up a Master
password.

Bios works fine, In fact, no password has been setup, Bios tells me this. Can get to F8 options but it all leads me back to the corrupt dll message.

Ive put in a message to her for her OEM disc....will this make a difference? Will I still get the prompt for a password?

Any help would be appreciated!

Thanks!

A:Missing dll file and unable to boot

Password requests depend on the system involved, the CDs used, and user intent.http://www.microsoft.com/genuine/ProgramIn...8d-a541ba3aaba9If one has a Microsoft Genuine Windows XP install CD...a user is prompted for a password: a. When such has been implemented by the owner. b. When attempting to access the Recovery Console from that CD. In most cases, this prompt has nothing to do with implemtation of an actual password...and can be overcome by just hitting Enter, moving to the command prompt for RC commands.BIOS passwords have nothing to do with installing XP or Microsoft. Such (BIOS passwords) are implemented by the manufacturer/seller to enable restricted access to that particular system.Many laptops come with a very strong BIOS password capability that locks up the hardware and makes the laptop completely unusable. This is the password that has to be entered before the operating system loads, usually on a black screen a few seconds after the laptop is started.Of course BIOS password can be set on a PC too, but there it is stored together with the other BIOS settings - date, time, hard disk size, etc.!However, most laptops store the BIOS password in a special chip, sometimes even hidden under the CPU, that is not affected when the rest of the BIOS settings are reset. This makes the removal of a BIOS password on a laptop almost impossible. The only option in most cases is to replace the chip which is quite expensive and risky procedure and, of course, not suppor... Read more

Read other 1 answers
RELEVANCY SCORE 84

Hello Guys,
I am seeing "Your computer may be infected with Spyware"ads all over the place inistead of any graphics or video on my laptop. For example. I go to youtube and all I see is this instead of any video postings as normal. Plus it has made my internet connection extremely slow. I have done everything that I can and know but am unable to solve this. I have started my computer in safe mode, ran combofix, ran superantispyware, spybot, ad-aware, u name it.

Following is my log for Hijackthis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:03:32 AM, on 1/5/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\eho... Read more

A:Problem unable to go away: Need help with this HIJACKTHIS log file

Please help, i am also getting very slow upload speeds
 

Read other 1 answers
RELEVANCY SCORE 83.6

Ihave tried several times to remove the items that say "file missing", but they keep coming back.Are these the cause of IE7 on Vista constantly getting shut down by DEP?Thanks,TimLogfile of Trend Micro HijackThis v2.0.2Scan saved at 2:25:23 PM, on 10/8/2007Platform: Windows Vista (WinNT 6.00.1904)MSIE: Internet Explorer v7.00 (7.00.6000.16512)Boot mode: NormalRunning processes:C:\Program Files (x86)\ASUS\AASP\1.00.32\aaCenter.exeC:\Program Files (x86)\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exeC:\Program Files (x86)\Linksys EasyLink Advisor\LinksysAgent.exeC:\Program Files (x86)\Billeo\billeo.exeC:\Program Files (x86)\Trend Micro\Internet Security 2007\pccguide.exeC:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exeC:\Program Files (x86)\CyberLink\PowerBackup\PBKScheduler.exeC:\Program Files (x86)\Brother\Brmfcmon\BrMfimon.exeC:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exeC:\Program Files (x86)\Internet Explorer\iexplore.exeC:\Program Files (x86)\Windows Live Toolbar\msn_sl.exeR3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dllF2 - REG:system.ini: UserInit=userinit.exeO2 - BHO: Yahoo! Toolbar Hel... Read more

A:File Missing Entries In Hijackthis

Welcome to the BleepingComputer Forums. Since it has been a few days, please post a new HijackThis log. Thank you for your patience.If you have already posted this log at another forum or if you decide to seek help at another forum, please let us know. There is a shortage of helpers and taking the time of two volunteer helpers means that someone else may not be helped.

Read other 2 answers
RELEVANCY SCORE 83.6

I am unable to run a GMER scan as it crashes everytime I try. I would really appreciate any help, thank you.DDS log:.DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 7.0.6002.18005Run by Gwen at 18:14:25 on 2012-03-31.============== Running Processes ===============.C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\System32\DriverStore\FileRepository\stwrt.inf_ae0b52e0\STacSV.exeC:\Windows\system32\SLsvc.exeC:\Windows\System32\WLTRYSVC.EXEC:\Windows\System32\bcmwltry.exeC:\Windows\System32\spoolsv.exeC:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exeC:\Windows\system32\RUNDLL32.EXEC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Program Files\Eset\ESET NOD32 Antivirus\egui.exeC:\Program Files\Windows Media Player\wmpnscfg.exe\\?\C:\Windows\system32\wbem\WMIADAP.EXEC:\Windows\system32\wbem\wmiprvse.exeC:\Windows\system32\wbem\wmiprvse.exeC:\Users\Gwen\Desktop\dds.scrC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k rpcssC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Wind... Read more

A:(file missing) on HijackThis log, how do I remove it?

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.===Please DownloadTDSSKiller.zip>>> Double-click on TDSSKiller.exe to run the application.Click on the Start Scan button and wait for the scan and disinfection process to be over.If an infected file is detected, the default action will be Cure, click on Continue
If a suspicious file is detected, the default action will be Skip, click on Continue
If you are asked to reboot the computer to complete the process, click on the Reboot Now button. A report will be automatically saved at the root of the System drive ((usually C:\) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt" (for example, C:\TDSSKiller.2.2.0_20.12.2009_15.31.43_log.txt). Please copy and paste the contents of that file here.If no reboot is required, click on Report. A log file will appear. Please copy and paste the contents of that file in your next reply.Download http://public.avast.com/~gmerek/aswMBR.exe (aswMBR.exe) to your desktop. Double click the aswMBR.exe to run it Click the "Scan" button to start scan. Upon completion of the scan, click Save log, and save it to your desktop. (Note - do not select any Fix at this time) <- IMPORTANTPlease post the contents of that log in your next reply.There shall also be a file on your desktop named MBR.dat. Righ... Read more

Read other 8 answers
RELEVANCY SCORE 83.6

A bit of background - was getting weird sluggishness from my Acer laptop (attempting to start Firefox would use the entire CPU), never got the Windows 10 upgrade notification flag (My ASUS laptop did, and I installed, but it is telling me my connection isn't secure when I try to log into very basic sites, like Yahoo for Fantasy football), and have tried to run Comodo and MalwareBytes to snag malware or other bugs. 
 
I am not proficiently literate enough to know which startup and .dll files are bugged, but when 22 entries show up as (file missing) and paths show up as "@%SystemRoot%" on HijackThis, I knew I needed more competent help. Lots of (Unknown Owner) stuff also.
 
Any assistance greatly appreciated!

Read other answers
RELEVANCY SCORE 83.6

A bit of background - was getting weird sluggishness from my Acer laptop (attempting to start Firefox would use the entire CPU), never got the Windows 10 upgrade notification flag (My ASUS laptop did, and I installed, but it is telling me my connection isn't secure when I try to log into very basic sites, like Yahoo for Fantasy football), and have tried to run Comodo and MalwareBytes to snag malware or other bugs. 
 
I am not proficiently literate enough to know which startup and .dll files are bugged, but when 22 entries show up as (file missing) and paths show up as "@%SystemRoot%" on HijackThis, I knew I needed more competent help. Lots of (Unknown Owner) stuff also.
 
Any assistance greatly appreciated!

A:22 (file missing) errors in my HijackThis log

 
 
Please run sfc /scannow
 
The sfc /scannow command scans all protected system files and replaces corrupted and incorrect versions with correct Microsoft versions.
 
To open the Command Prompt press the Windows key and the X key at the same time.   A menu will open with the option Command Prompt (Admin), click/tap on this.
 
You will see a window similar to the one below.
 

 
When the Elevated Command Prompt opens copy and paste in sfc /scannow, then press Enter.
 
This will take a while,  have patience and allow it finish.  Stopping this scan could damage files.  
 
When the scan is finished please post the log of this scan.
 
Do the following to access the sfc /scannow log.
 
Open the Command Prompt, copy and paste the command below followed by pressing the Enter key.
 
copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
 
This will place a new icon on the desktop titled CBS.  Double click on this icon to open 
the CBS log, copy and paste the log in your topic.

Read other 8 answers
RELEVANCY SCORE 83.6

I've got 2 services with the file missing in my log.
O23 - Service: SQL Server (BWDATOOLSET) (MSSQL$BWDATOOLSET) - Unknown owner - c:\program files\steam\steamapps\common\dragon age origins\tools\toolssql\MSSQL.1\MSSQL\Binn\sqlservr.exe (file missing)
And
O23 - Service: Stardock WindowBlinds (WindowBlinds) - Unknown owner - C:\Program Files\Stardock\MyColors\VistaSrv.exe (file missing)

I've tried fixing them but it does not seem to work. Also wondering about the following ATI Service, if it is safe to remove. I used to have ATI installed on this system, but now I've gone to NVidia.
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe

Finally the two taskeng.exe in running processes, is that normal? Also why is the .exe capitilized in C:\Windows\Explorer.EXE and should explorer not be in the system32 folder?

Thanks for any assistance, and here is the full Log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:17:33 PM, on 24/12/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18865)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\AVG\AVG9\avgtray.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Micro... Read more

Read other answers
RELEVANCY SCORE 83.6

When trying to boot my HP Split x2 laptop I'm getting a BLUE SCREEN error "Recovery  Your PC needs to be repaired. The Boot Configuration Data file is missing some required information.  File: \BCD  Error Code: 0xc0000034.  I've tried everything that I can think of, but I can't get by this screen.  I have no CD/DVD drive in this model so I can't run any diagnostic tools, even if I had a tools CD/DVD. I'm stuck!  Please help!

A:File: \BCD file is missing some required information

1)  Press and hold the Power Button until the "haptic" feedback buzz is made. Immediately after the buzz, start tapping the "ESC" key until "ESC... Pausing Startup" is dispalyed in the lower left corner and/or the "Startup Menu" is displayed. 2a)  Press "F2" to start the "System Diagnostics" options. This may help in determining if there is a hardware issue with your computer. If there is a hardware issue, please contact HP. If there is no hardware issue, proceed to step "2b." 2b)  Repeat step "1" and press "F11" to start the "System Recovery" options. 3)  Choose your keyboard layout. 4)  Under "Choose an option", select "Troubleshoot." 5)  Under "Troubleshoot", select "Advanced options." 6)  Under "Advanced options", select "Automatic Repair." 7)  Choose your "target Operating System" to begin the automatic repair. 8)  If "Automatic Repair" doesn't fix the issue, under "Troubleshoot", you can try "Refresh your PC", "Reset your PC", and "Recovery Manager (System Recovery)"... in that order. 9)  If none of the above solves the problem, you may need to use the USB Recovery Media you previously created to recovery the computer. If you didn't create the required USB Recovery Media, you will need to order the recovery media from HP. Please contact official HP support in your region / country via the HP Worldwide Support Portal to see if HP Recovery Media is avail... Read more

Read other 9 answers
RELEVANCY SCORE 83.6

I am trying to install Japanese Lang support but my xp cd does not have this file wftlx041e.dll I have search on the web but all if find is ftlx041e.dll which the install won't recognize. I am using xp 64-bit.

I even search on Microsoft pages but found nothing.

and I don't have office xp so I can't use any of the Global Lang files.
 

Read other answers
RELEVANCY SCORE 83.6

When I try to run Easy CD creator, I get an error message that a particular .dll file is missing and is needed to burn a CD. I did a search for this file and found it in C:\Windows. I copied the file to the Easy CD creator folder, restarted the computer, but still got the same error when I tried to run the CD creator.

FYI.......I did all of this in safe mode because my computer is all frigged up right now in normal mode. Is there some reason the program is not finding this .dll file?? Ideas??

Mike
 

A:Adaptec CD Creator says it's missing a file, yet the file is there. Huh??

Closing duplicate, please reply here:

http://forums.techguy.org/showthread.php?t=298611
 

Read other 1 answers
RELEVANCY SCORE 83.2

Some time ago, Noel had a remarkable record for finding missing files. I wonder if he could do it again.
I have inherited this machine from a recently deceased friend. I think it came with Vista, and he installed Win 7 a long time ago. I'd like to keep it, but it needs SP1 to be eligible for Win 10, and that installation fails for lack of several files. Here's the list from CheckSUR.log:
Checking Component Store
(f) CSI Payload File Missing 0x00000000 sffdisk.inf amd64_sffdisk.inf_31bf3856ad364e35_6.1.7600.16438_none_00698d0a036fb7e7
(f) CSI Payload File Missing 0x00000000 sffp_sd.sys amd64_sffdisk.inf_31bf3856ad364e35_6.1.7600.16438_none_00698d0a036fb7e7
(f) CSI Payload File Missing 0x00000000 sdbus.sys amd64_sdbus.inf_31bf3856ad364e35_6.1.7600.16438_none_ce10c0cae3dcd5f8
(f) CSI Payload File Missing 0x00000000 sdbus.inf amd64_sdbus.inf_31bf3856ad364e35_6.1.7600.16438_none_ce10c0cae3dcd5f8
(f) CSI Payload File Missing 0x00000000 sffdisk.inf amd64_sffdisk.inf_31bf3856ad364e35_6.1.7600.20546_none_00e659551c9740f4
(f) CSI Payload File Missing 0x00000000 sffp_sd.sys amd64_sffdisk.inf_31bf3856ad364e35_6.1.7600.20546_none_00e659551c9740f4
(f) CSI Payload File Missing 0x00000000 sdbus.sys amd64_sdbus.inf_31bf3856ad364e35_6.1.7600.20546_none_ce8d8d15fd045f05
(f) CSI Payload File Missing 0x00000000 sdbus.inf amd64_sdbus.inf_31bf3856ad364e35_6.1.7600.20546_no... Read more

Read other answers
RELEVANCY SCORE 83.2

i am no longer able to start my pc. when i start it i get this message:
"windows could not start because the following file is missing or corrupt.
<windows root>\system32\hal.dll.
please reinstall a copy of the above file."
how do i reinstall the above file? where can i find it? etc. need help. thanx

my os is XP Pro

A:unable to start pc (missing/corrupt file)

try reinstalling windows xp and see if reinstalling fixes your problem.

Read other 5 answers
RELEVANCY SCORE 83.2

Hello,  I have just discovered a new MALICIOUS FILE IN MY LIBRARY DOCUMENTS.  This file named (1) Kathie Cargill- Barber contains several  (about 30) malicious virus's.  I did NOT CREATE THIS FILE !!!!!!!  It is dated 4-154-17
all at 10:42 am.   How do I delete this file????? Please help.... I am going thru a bad divorce and my husband's boyfriend is a computer software Engineer.... I believe he put this file on my computer..... PLEASE HELP!!!! I am 59 yeras old and not
very good on the computer.....My name is Kathie

Read other answers
RELEVANCY SCORE 82.8

I updated HijackThis a week or so ago and just now noticed that the "Delete File Option" is greyed out. Is something wrong with my download or is this by default now?
 

A:HijackThis Missing Delete File Option

Hi Deke,
Its not grayed out on mine !! 1.99
 

Read other 3 answers
RELEVANCY SCORE 82.8

I have had problems with games and online apps not running as smooth as usual. I ran a HiJackthis log and saw some strange entries including a winlogon service entry that ended with file missing will somebody look and see if there are any problems?

Logfile of HijackThis v1.99.1
Scan saved at 1:00:19 AM, on 6/11/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Yahoo!\Antivirus\ISafe.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\PROGRA~1\Yahoo!\YOP\yop.exe
C:\Program Files\Yahoo!\Antivirus\VetMsg.exe
C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
C:\Program Files\Yahoo!\Antivirus\CAVTray.exe
C:\Program Files\Yahoo!\Antivirus\CAVRID.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Filseclab\xfilter\xfilter.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S0HIC1.EXE
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Common Files\Filseclab\FilMsg.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Yahoo!\browser\ybrowser.exe
C:\Program Files\DAP\DAP.EXE
C:\Program Files\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Searc... Read more

A:Solved: file missing HiJackThis entry

Run HJT again and put a check in the following:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cust...search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cust...search/ie.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
O1 - Hosts: 66.98.136.25 auto.search.msn.com
O1 - Hosts: 66.98.136.25 auto.search.msn.es

Close all applications and browser windows before you click "fix checked".
 

Read other 1 answers
RELEVANCY SCORE 82

Logfile of HijackThis v1.99.1
Scan saved at 6:41:53 PM, on 3/24/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\BullGuard Software\BullGuard\BullGuardUpdate.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\Program Files\Common Files\InstallShi... Read more

A:folder options missing & can't run regedit - log file from hijackthis

Hello and welcome to TSF.

Sorry for the delay in response. If you have not received help elsewhere and still need help, please post a fresh HijackThis log and I'll be happy to help you.

Read other 1 answers
RELEVANCY SCORE 82

I don't know why hijackthis is showing that many file missing entries; I am running vista x64 with sp1 on a gateway laptop.

Never touched those files. Please advise me on what to do with these entries: log posted below.

Thanks for helping.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 下午 01:13:58, on 2008/9/6
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\RocketDock\RocketDock.exe
C:\Program Files (x86)\Microsoft Student\Microsoft Student with Encarta Premium 2008 DVD\EDICT.EXE
C:\Program Files (x86)\AVG\AVG8\avgtray.exe
C:\USERS\MOOMOU\DESKTOP\UTILITY\PROCESSEXPLORE\PROCEXP.EXE
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program File... Read more

Read other answers
RELEVANCY SCORE 82

I have attached my hijackthis log. I have just got over a winbooterr infection that didn't seem to want to go away with malwarebytes or hijackthis. Then I realized that I wasn't running hijackthis as an administrator. Do I have to do the same for malwarebytes? I thought it was set automatically for running as an administrator. Anyways I would like help removing the missing files as every time I delete them they don't go away they just seem to delete and are still there when I rescan and completely restart. Also I would like to know if I have any other infections within the hijackthis log as I still don't know every single infection possible in hijackthis logs to remove only things I know to delete.

A:I am having problems removing file missing things in hijackthis.

Only the experts will give you clearance if you feel your computer is compromised.

Read this to achieve a clearance for your system please.

kind regards,

Read other 1 answers
RELEVANCY SCORE 81.6

Hello, I read with interest that tom982 has a way of giving special instructions for repairing corrupt or missing files that sfc /scannow is unable to repair. Maybe others can also help me with this, but I only looked at the following thread mentioning tom982 (so far): How do you fix corrupted files found by SFC /SCANNOW?

Here's the problem that was posted in the CBS log (everything else seems to be okay with the log):

2014-12-07 13:14:57, Info CSI 0000019b [SR] Cannot repair member file [l:18{9}]"ATL80.dll" of Microsoft.VC80.ATL, Version = 8.0.50727.6195, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:1fc8b3b9a1e18e3b}, Type = [l:10{5}]"win32", TypeName neutral, PublicKey neutral in the store, file is missing

I also downloaded and ran the Microsoft Visual C++ 2005 Service Pack 1 Redistributable Package MFC Security Update, as well as the Microsoft Visual C++ 2005 Service Pack 1 Redistributable Package ATL Security Update. I then tested one of the applications that gave the missing ATL80.dll message (Snipping Tool), and did not get the error message. But then I checked again, and the missing ATL80.dll error is returning again, consistently.

I will be very grateful for any help you can give me. Thank you very much!

A:tom982 - sfc /scannow unable to repair missing ATL80.dll file

Hello and welcome bluegreen now I NO expert but perhaps a read of this
What is the difference between SFC, Chhdsk, and Error-Checking? - Microsoft Community

then from that
Check a drive for errors like I said I am no expert and I am only suggesting the chkdsk as an option and in my mind there is the very outside possibility of the drive being out of kilter.

Read other 9 answers
RELEVANCY SCORE 81.2

Exe's are going missing everyday. Infected with some virus. I am including HiJack This logfile. Please help. Thanks in advance.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:43:10 PM, on 06-08-2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Cisco Systems\CiscoTrustAgent\ctalogd.exe
C:\Program Files\Cisco Systems\CiscoTrustAgent\ctapsd.exe
d:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
d:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Cisco Systems\CiscoTrustAgent\ctatransapt.exe
D:\Program Files\Ashampoo\Ashampoo Magical Defrag\bin\aDefragService.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
d:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Google\Google Talk\googletalk.exe
D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
d:\Program Files\Alwil Software\Avast4\ashWebSv.exe
D:\Program Files\Ashampoo\Ashampoo Magical Defrag\bin\aDefragCtrl.exe
D:\Program Files\EditPlus 2\editplus.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\Program Files\SQLyog Community\SQLyog.exe
D:\LeapFTP\LeapFTP.exe
C:\Program Fil... Read more

A:Infected with virus. Exes are going missing. HiJackThis Log file included.Please help

Please visit Combofix Guide & Instructions for instructions for installing the recovery console and downloading and running ComboFix.

Post the log from ComboFix when you've accomplished that along with a new HijackThis log.

Important notes regarding ComboFix:

ComboFix may reset a number of Internet Explorer's settings, including making it the default browser. This can easily be changed once we're finished.

ComboFix also prevents autorun of ALL CDs, floppies and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you, please let me know. This can be undone manually when we're finished.

Note: During this process, it would help a great deal and be very much appreciated if you would refrain from installing any new software or hardware on this machine, unless absolutely necessary, until the clean up process is finished as it makes our job more tedious, with additional new files that may have to be researched, which is very time consuming.

Also, please do not run any security programs or fixes on your own as doing so may compromise what we will be doing. It is important that you wait for instructions.
 

Read other 1 answers
RELEVANCY SCORE 81.2

Three items of malware were removed by McAffee, after which I got an error message relating to a missing ufgreag.dll file.

I asked about this on a previous thread ufgreag.dll file missing following virus problems - cannot find info and was advised that it was probably a startup entry created by the now removed malware, but that I should download HijackThis and post the results here. These are below and I'd be grateful if someone could check it.

I did read the "Everyone MUST read this" sticky, but I'm not clued up enough to know what a script blocker is or how to disable one or whether or not I have a CD emulation program which would apparently skew the results.

It all seems to be working fine, fingers crossed that all is well!
EDITED TO ADD - If it helps, I'm happy to do the DDS and GMER process, if someone can tell me about the script blocker / CD emulation wotnot

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:33:57, on 30/09/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Fi... Read more

A:HijackThis log, as suggested on my previous thread about missing ufgreag.dll file

Read other 16 answers
RELEVANCY SCORE 80.8

Logfile of Trend Micro HijackThis v2.0.4Scan saved at 2:00:02 PM, on 5/22/2010Platform: Windows 7 (WinNT 6.00.3504)MSIE: Internet Explorer v8.00 (8.00.7600.16385)Boot mode: NormalRunning processes:C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exeC:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exeC:\Program Files (x86)\AVG\AVG9\avgtray.exeC:\Program Files (x86)\iTunes\iTunesHelper.exeC:\Program Files (x86)\Common Files\Java\Java Update\jusched.exeC:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exeC:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exeC:\Program Files (x86)\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exeC:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exeC:\Users\Preston\Downloads\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.ca/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - H... Read more

A:Hijack this log file (Windows 7 64bit)

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you let... Read more

Read other 2 answers
RELEVANCY SCORE 80.8

I cannot open Help files that require the Windows Help (WinHlp64.exe) program.
please help
thakns

A:chm file not work with windows 7 (64bit)

Check file Associations. In start menu search box type "file associations".

If it is a file that you downloaded right click it and select properties and make sure it is unlocked.

Read other 1 answers
RELEVANCY SCORE 80.8

How can I enable the zip file that is supposed to be a default zip file in Windows 7.

A:zip file in windows 7 64bit professional

if you or someone else has disabled zip file support, then
to (disable or) enable zip file support see this excellent guide thread here on the forum.

to use the inbuilt zip file support see windows help, search for 'zip files'
gives you: (Click thumbnail to get it a readable size.)

Zip a File or Folder - How To

Read other 1 answers
RELEVANCY SCORE 80.8

agggggg, OK I successfully followed the instructions to remove Security Sphere, got to the part where you delete the host file, right clicked on the replacement windows 7 host file, save target as.....and my etc file was not there. I was able to see it when I just went through the start menu>computer>c drive blah blah, but it wasn't there when I went to save. (no the hide box isn't checked) then I went to try it again, right click on the link>save as etc etc and now my system32 folder is gone........what do I do???????

now I can't even find my system32 folder by going through the start menu.

any help is very much appreciated!

Read other answers
RELEVANCY SCORE 80.8

HELP, HELP, HELP,!!!!!:

C:\WINDOWS\WS2_32.DLL APPEARS TO BE CORRUPT

2. C:\ProgramFiles\TDS accelerator\slipgui.exe
attached devise not working
 

Read other answers
RELEVANCY SCORE 80

Hi all,

Any idea how to write Batch File .bat to copy file from File Sharing & FTP Hosting to local directory.

Current the File Sharing & FTP Hosting is SMARTFILE.

I don't want to use WINSCP as the connector.

Thanks

A:Batch File .bat to copy file from File Sharing & FTP Hosting

Hi Chacha,

Give this batch file a try. All text in red, you should adjust before running.


Code:
@echo off
(
echo.Username
echo.Password
echo.lcd C:\Some\local\directory
echo.cd /Some/server/path
echo.binary
echo.get Some_file_to_download.txt
echo.bye
) > "%TEMP%\_%~n0.ftp"
ftp -s:"%TEMP%\_%~n0.ftp" "12.34.56.78"
del "%TEMP%\_%~n0.ftp"

Read other 1 answers
RELEVANCY SCORE 80

Hello everyone,

Firstly I would like to say that this seems like a swell enough forum as is and I am frankly out of ideas. About a year ago I had backed up a rather large series of files under one name for my roommate who was in the process of doing some "spring cleaning" on his computer. Fast forward to now and he is out of Hard-drive space damn near and has been unable to find the reserve file himself. Below is the directory under which I named and saved the around 200gb file of games and old-ROTC documents. Regardless the file needs to be found and even after un-hiding all files from the control panel, I have yet been able to locate it. It would seem to be simple enough, one would think that you could see the file name sitting above Program Files but it is not. Any one have any ideas, we would rather not have to reformat/ system restore if we can avoid it.

C:\common_ORIGINAL NEW FAGS
 

A:File path error/ Cannot find file directory/file itself

I used a software called TreeSize which shows the size of all folders on the disk. Thinking that the Windows OS is around 18gb, a 200gb files should really stick out with TreeSize.
https://www.jam-software.de/customers/downloadTrial.php
 

Read other 1 answers
RELEVANCY SCORE 80

God bless you, I am not a computer person please help me to fix the problem I have.
Every time I open a word, power point and note pad program another file is opens with that (with a infinity sign in the front with the same extension ) is that a thread or how can I stop this

thank you
R.Gnanavannan

Please someone help me

A:when open a word file or pwrpnt file another file is opens

Welcome to the Seven Forums.

I saw your post right after you made it but I did not post a reply because:
1) Real life got in the way
2) I'm not sure that I understand your issue.
I'm not picking at your English, but this is important:

Your post mentioned, "another file is opens with that".

I'm guessing that you meant:
...another file is opened with that
or
...another file opens with that

Either way, the word open is really important to the description of your problem.

Let's just talk about Word for now.

When you open a Word, one or more temporary files may be created. This is normal and desired; but those temp file(s) should not automatically open in Word.

Please try this:
Close all copies of Word.
Open Windows (file) Explorer.
Double click on an existing Word document.

How many windows do you have open for the Word program?
(Hopefully, just one.)

How many files do you have open in the Word program?
(Hopefully, just one.)

Are you seeing this file that bothers when you look at Word or when you look at Windows (file) Explorer?

Please show us what you see and where you see it.
Here is a link with instructions about posting screenshots to this forum:
Screenshots and Files - Upload and Post in Seven Forums

Your post mentioned, "(with a infinity sign in the front with the same extension )"
The temporary file(s) that Word might create should start with a Tilde character and then the dollar sign (~$), not the symbol for infinity. And Notepad s... Read more

Read other 1 answers
RELEVANCY SCORE 80

I have been using this same Excel file for many years. I viewed on my new home laptop 2 days ago, using a 2010 Excel Version. It was created on 2007.

I opened it on my work computer, version 2003, and now get the above error message on both machines. The file can no longer be opened.

I have tried emailing it, still won't open.

I have chenged the file type to both .xls and .xlxs neither open.

I downloaded the program on the home page of this site, and it said no file issues, no known problems for this file.

When I click Open File, it still shows where I had the file opened (the file name in lighter gray font - but cannot open.) The original file is in black, and I can open. But, get that message.

I also tried to open and fix - and I tried both options, with formulas, and without formulas, and all it opened was foreign characters.

Any other suggestions? Or is this file gone? Unfortunately, my most recent back up is 3-4 months old...

Thank you for your help,
 

A:Excel File now says File Format or File Extension is not valid...

Read other 6 answers